high8.1
CVE-2016-1866
Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inse…
Impact
Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data stream.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Saltstack | Salt | Versions 2015.8.0, 2015.8.1, 2015.8.2, 2015.8.3 |
| Opensuse | Leap | Version 42.1 |